Study. uk . com
  1. Home
  2. All questions
  3. Question 417

CISSP study material · question 417 of 500

Which conditions bring an occurrence within the definition of a cybersecurity incident used by NIST SP 800-61 Rev. 3? Choose two.

  1. It has been confirmed by an external party such as a regulator.
  2. It constitutes or imminently threatens a violation of law, security policy, procedure or acceptable use policy.
  3. It actually or imminently jeopardises confidentiality, integrity or availability without lawful authority.
  4. It causes measurable financial loss to the organisation.
Show the answer

Answer: C. It actually or imminently jeopardises confidentiality, integrity or availability without lawful authority.
B. It constitutes or imminently threatens a violation of law, security policy, procedure or acceptable use policy.

The definition covers occurrences that actually or imminently jeopardise the security objectives without lawful authority, or that violate or imminently threaten to violate law, policies, procedures or acceptable use policies.

Source: NIST SP 800-61 Rev. 3 (NIST) — SP 800-61r3 > 1. Introduction

Challenge yourself on this topic → Study as cards